Conditional Access and multi-factor authentication help protect and govern access

A single identity platform lets you engage with internal and external users more securely

Developer tools make it easy to integrate identity into your apps and services

Connect your workforce

Whether people are on-site or remote, give them seamless access to all their apps so they can stay productive from anywhere. Automate workflows for user lifecycle and provisioning. Save time and resources with self-service management.

Choose from thousands of SaaS apps

Protect and govern access

Safeguard user credentials by enforcing strong authentication and conditional access policies. Efficiently manage your identities by ensuring that the right people have the right access to the right resources.

Integrate identity into your apps

Accelerate adoption of your application in the enterprise by supporting single sign-on and user provisioning. Reduce sign-in friction and automate the creation, removal, and maintenance of user accounts.

Microsoft Graph

Identity standards and protocols

Read the Identity Standards Blog to learn more about standards and protocols such as FIDO2, OAuth, OpenID Connect, and Security Assertion Markup Language (SAML).

Trusted by companies of all sizes and industries

"Walmart's cybersecurity team initially was skeptical about the security of the public cloud. As they learned more about Microsoft security features, their trust in Azure AD grew and they were able to apply custom security policies."

"Using Azure AD and SAML protocols, Zscaler provided single sign-on for its customers so they could access any app. The company also automated its user provisioning process to give employees faster access to critical applications."

"Uniper employees get secure and convenient access to on-premises and cloud apps from the same portal through Azure AD application proxy and single sign-on. Multi-factor authentication via a conditional access policy enhances the user experience."

Frequently asked questions about Azure AD

Azure AD receives ongoing improvements. Stay up to date with the most recent developments by reading our monthly updates, or see the product announcements on the Azure Active Directory Identity Blog.

We guarantee at least 99.9 percent availability of Azure Active Directory Premium services. See the full SLA.

Conditional access is a capability of Azure AD that lets you implement automated access-control decisions for accessing your cloud apps based on conditions. Conditional access policies are enforced after the first-factor authentication has been completed. It’s not intended as a first-line defense for scenarios like denial-of-service (DoS) attacks, but it uses signals from these events to determine access.

Implement single sign-on for your hybrid environment by configuring password hash synchronization or using federation solutions such as Active Directory Federation Services. With Azure AD Premium, you also get health monitoring for your on-premises identity infrastructure and synchronization services.

Yes. Azure AD supports several standardized protocols for authentication and authorization, including SAML 2.0, OpenID Connect, OAuth 2.0, and WS-Federation. It also supports password vaulting and automated sign-in capabilities for apps that support only forms-based authentication. Learn more about authentication scenarios and protocols, and SSO for applications.